Question 1

An organization stores sensitive customer data in a cloud storage service. The compliance officer is concerned about protecting this data against unauthorized access during both storage and transmission. Which method best ensures data security for sensitive information stored in a public cloud environment?

Options :

A : Encrypting data at rest and using SSL/TLS for data in transit.

B : Storing sensitive data in plaintext for easy access and performance optimization.

C : Using shared cloud storage buckets with public access for convenience.

D : Relying on the cloud provider-s default security policies without additional configuration.

Answer: A

Question 2

An organization implements a new cloud-based collaboration platform. The SOC team notices a lack of visibility into activities on the platform, increasing the risk of data breaches. What should the SOC team prioritize to improve visibility in this context?

Options :

A : Use native security features of the collaboration platform, such as logging and monitoring APIs.

B : Increase the number of access controls to limit platform usage.

C : Rely on employee reports to detect suspicious activity on the platform.

D : Monitor only administrative accounts to save on resource usage.

Answer: A

Question 3

When comparing TLS to other tunneling protocols, such as IPsec, which of the following is an advantage of TLS in securing communication tunnels?

Options :

A : TLS operates at the network layer, making it faster than application-layer protocols.

B : TLS is designed to secure individual sessions at the application layer, providing granular control.

C : TLS supports multicast traffic, whereas IPsec cannot handle multicast traffic.

D : TLS does not require a certificate authority, unlike other tunneling protocols.

Answer: B

Question 4

Which of the following devices primarily operates at Layer 2 of the OSI model and is responsible for forwarding data based on MAC addresses?

Options :

A : Switch

B : Firewall

C : Hub

D : Router

Answer: A

Question 5

What does the term "Mean Time to Respond (MTTR)" signify in the context of security operations?

Options :

A : The average time taken to detect a threat after it enters the network

B : The average time taken by the security team to respond to and mitigate a security incident

C : The average time between identifying a threat and reporting it to stakeholders

D : The average time taken to patch a known vulnerability in the system

Answer: B

Higher Test Marks with Free Online Cybersecurity-Apprentice Exam Practice

Buying Options: